Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: 1Sg1lLGP0nwmOu/gfY6xkHauK7Flmtq2WvP/9ZnnPTw=
Subject key identifier: E8:A9:77:37:E8:D6:6F:C4:EB:CA:AB:FC:4B:93:82:94:4B:97:92:88
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 0196802205550690EDCB761E4A782B01B952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 04E8
Signing time: Tue 29 Apr 2025 06:00:35 +0000
Manifest this update: Tue 29 Apr 2025 06:00:35 +0000
Manifest next update: Wed 30 Apr 2025 06:00:35 +0000
Files and hashes: 1: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: bx2j9oDnMFvB/xEiX5E0z+Db69UNm6h1zbFniwl7pwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:05:55:06:90:ed:cb:76:1e:4a:78:2b:01:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Apr 29 06:00:35 2025 GMT
Not After : Apr 30 06:00:35 2025 GMT
Subject: CN=e8a97737e8d66fc4ebcaabfc4b9382944b979288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:b5:1f:19:40:12:84:43:57:a2:2f:eb:22:
9f:dd:02:2a:93:27:41:59:ff:ae:e0:50:06:69:cf:
0b:ab:81:4b:a3:d0:4a:47:66:ac:4c:9d:f0:9f:93:
01:a0:e7:e2:82:d5:00:b1:dd:97:c7:4c:94:0f:5d:
55:6c:13:87:39:5d:03:e6:ad:da:11:0f:c6:47:35:
10:d5:ab:82:80:1f:05:86:ac:f5:bc:9f:7c:f0:68:
66:4c:2f:f1:65:6a:df:26:a0:ec:73:cf:b8:1c:62:
bc:7e:34:33:1e:20:1b:30:6b:8d:eb:b0:a4:91:53:
ca:cb:d0:5b:27:24:11:b9:58:ad:7d:51:50:a8:c9:
d8:0a:22:84:74:2e:1c:e2:76:c5:fe:24:eb:ba:0e:
50:0b:24:b1:8d:b5:a7:b6:9c:c8:9b:08:44:36:ee:
09:0e:ca:ae:52:3e:d8:94:1c:f6:1d:35:25:68:53:
d0:18:e9:91:cc:73:8c:bd:ef:22:ca:5d:1e:86:85:
ac:70:d8:06:58:11:67:f8:79:ac:d4:a1:f0:83:9e:
42:f9:cd:c3:8b:5a:53:71:51:7b:c2:9d:76:0e:77:
1a:ae:38:dc:3c:58:86:b3:aa:b3:c4:40:a7:88:78:
eb:c1:56:e4:a0:42:60:75:73:5e:60:92:5e:3b:42:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:77:37:E8:D6:6F:C4:EB:CA:AB:FC:4B:93:82:94:4B:97:92:88
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fc:61:55:d0:3a:f3:83:87:c8:ac:d6:14:2e:df:8e:41:54:
d6:09:f5:91:b2:70:4d:c4:89:81:2f:01:bd:83:3e:ea:85:7f:
b3:21:07:81:4c:05:2a:cb:29:ba:c2:37:49:46:77:0b:01:13:
c5:23:e5:6e:56:e5:b2:f5:47:89:47:03:86:e9:ed:60:9d:4d:
52:62:2f:01:6d:83:fb:3a:05:cf:e7:89:20:cf:91:81:a4:6d:
ca:cb:d1:46:1b:7f:3a:b4:3b:97:5c:5c:f8:76:d1:f5:f6:55:
da:b3:1b:84:32:8e:dc:7c:62:42:fb:74:64:2d:82:20:b5:35:
0b:35:65:89:33:22:44:f2:41:a5:8a:8c:0c:7c:1c:18:67:67:
a0:d4:2b:50:af:f9:37:d0:cf:48:ea:cf:c3:b4:1d:9e:25:85:
6e:51:b7:0c:8d:69:3a:37:cb:a1:90:65:0e:de:e9:ef:f7:aa:
00:56:39:30:93:eb:80:4d:a9:ca:13:09:e0:04:99:28:83:2f:
ab:1f:a5:93:b2:1e:63:99:6c:fd:c2:ee:c9:39:c0:a6:89:8b:
28:fe:25:54:d3:6b:01:aa:e3:28:45:eb:94:a5:fc:6f:22:45:
0b:7a:e1:f4:66:97:74:25:ae:2a:73:27:c2:7c:42:a8:e7:71:
f0:ab:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:35:12 2025 by rpki-client